Re: canti.exe
From: Rick \ (rick_at_mvps.org)
Date: 11/06/04
- Next message: SJ: "RE: Think sp2 has slowed computer"
- Previous message: Alex Nichol: "Re: Copying Folders with some R/W files and som R Only."
- In reply to: MGGP: "canti.exe"
- Next in thread: MGGP: "Re: canti.exe"
- Reply: MGGP: "Re: canti.exe"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 6 Nov 2004 09:56:10 -0500
Hi MGGP,
It's a trojan (virus) file. Follow these "relatively" simple removal steps:
Restart in Safe mode by hitting F8 as Windows first begins to load on boot.
Logon as administrator. As this can be tricky, you will find help in doing
this here:
http://www.rickrogers.org/fixes.htm#Safe%20mode
Start/search/files and folders, look for canti.exe and delete it wherever it
is found.
Start/run regedit, expand the + signs to look under these keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg
Look in the right hand pane for the string or strings that load that file.
Delete just those strings that contain the reference. Do not delete other
strings or the keys from the left pane. Close the registry editor when
completed, make sure you check all strings.
Go to the Control Panel/System/System Restore tab. Check the box to "Turn
off system restore on all drives". Click apply/ok. This will remove all
restore points, however you don't want them back as some or all of them will
contain the virus depending upon how recently you got infected.
Restart the system normally. Go back to the Control Panel/System and restart
System Restore.
Update your antivirus software, run a full system scan.
-- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "MGGP" <anonymous@discussions.microsoft.com> wrote in message news:06ca01c4c40d$75e5a620$a501280a@phx.gbl... > Hello - > I have a Dell laptop that has a process that runs > constantly (canti.exe). Each time I terminate the process > it re-starts immediately. I have updated the Norton anti- > virus, Adaware and SpyBot - after it was detected by > Adaware, Adaware stopped working. I can find no > information about this program on Google or anywhere > else. Short of re-loading the system, does someone out > there have a useful idea ? The process consumes between > 20% and 80% of the CPU time and is a real drag on the > system. > Thanks, > MGGP
- Next message: SJ: "RE: Think sp2 has slowed computer"
- Previous message: Alex Nichol: "Re: Copying Folders with some R/W files and som R Only."
- In reply to: MGGP: "canti.exe"
- Next in thread: MGGP: "Re: canti.exe"
- Reply: MGGP: "Re: canti.exe"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
